[MEDIUM] nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields

PKSA-bty3-jphf-3n5y GHSA-f5c8-m5vw-rmgq

Affected version: <1.3.0

Reported by:
GitHub